Zploit 0-Day Shell

:: Editing File: team_members_list.php

<?php
include 'header.php';

// ✅ Set breadcrumb variables
$page_title = "Team Members";

include 'breadcrumb.php';
include 'menu.php';
?>

<div class="row">
            <div class="col-sm-8">
              <div class="card-header pb-0 card-no-border">
                <h2>Team Members</h2>
              </div>
            </div>
            <div class="col-sm-4">
              <div class="card-header pb-0 card-no-border text-end">
                <a href="team_members_add.php" class="btn btn-primary btn-sm">
                  <i class="fa fa-plus"></i> Add Team Member
                </a>
              </div>
            </div>
          </div>

<div class="card-body">
            <div class="dt-ext table-responsive">
              <table class="display table table-bordered" id="export-button">
                <thead>
                  <tr>
                    <th>#</th>
                    <th>Name</th>
                    <th>Position</th>
                    <th>Employee ID</th>
                    <th>Joining Date</th>
                    <th>Address</th>
                    <th>Contact Number</th>
                    <th>Email ID</th>
                    <th>Action</th>
                  </tr>
                </thead>
                <tbody>
                  <?php
                 /* $result = mysqli_query($conn, "SELECT * FROM team_members ORDER BY id DESC");*/
                 
                 
                $activeEmployee = isset($_GET['status']) ? $_GET['status'] : '';
                if (!empty($activeEmployee)) {
                    $query = "SELECT * FROM team_members as t
                              WHERE t.status = $activeEmployee
                              ORDER BY t.id DESC";
                } else {
                    $query = "SELECT * FROM team_members ORDER BY id DESC";
                }
                
                $result = mysqli_query($conn, $query);

if (mysqli_num_rows($result) > 0) {
                    $i = 1;
                    while ($row = mysqli_fetch_assoc($result)) {
                      echo "<tr>
                              <td>{$i}</td>
                              <td>" . htmlspecialchars($row['name']) . "</td>
                              <td>" . htmlspecialchars($row['position']) . "</td>
                              <td>" . htmlspecialchars($row['employee_id']) . "</td>
                              <td>" . htmlspecialchars(date('d-m-Y', strtotime($row['joining_date']))) . "</td>
                              <td>" . htmlspecialchars($row['address']) . "</td>
                              <td>" . htmlspecialchars($row['contact_number']) . "</td>
                              <td>" . htmlspecialchars($row['email_id']) . "</td>
                              <td>
                                <a href='team_members_edit.php?id={$row['id']}' class='btn btn-warning btn-sm'>
                                  <i class='fa fa-edit'></i> Edit
                                </a>
                                <a href='team_members_delete.php?id={$row['id']}' class='btn btn-danger btn-sm' 
                                   onclick=\"return confirm('Are you sure you want to delete this team member?');\">
                                  <i class='fa fa-trash'></i> Delete
                                </a>
                              </td>
                            </tr>";
                      $i++;
                    }
                  } else {
                    echo "<tr><td colspan='9' class='text-center text-muted'>No team members found</td></tr>";
                  }
                  ?>
                </tbody>
              </table>
            </div>
          </div>

</div>
      </div>
    </div>
  </div>
</div>

<?php include 'footer.php'; ?>